Hi,
any one know hot module and scan module (support bro 1.5) alternative in bro 2.5 ?
I think
https://github.com/initconf/scan-NG/blob/master/scripts/old-scan.bro is a
port of the old scan module.
May I ask why you need and can't use the one that currently ships with
Bro?
Johanna
I need to run old NFS.bro script into bro 2.5 this script calling UDP script udp-common and its calling scan.bro,hot.bro
https://github.com/grigorescu/bro-scripts/blob/master/scripts/todo/needs_review/nfs.bro
Ok, in that case - as I said before, you should probably just do a complete re-write of the script; you definitely cannot just include random old bro script files and hope that they work
Johanna
Hi ,
I Started doing nfs ANALYZER .bro script in bro 2.5
script , i the first script i am getting below error
*const ports = {111/tcp, 111/udp, 747/udp, 759/tcp, 762/udp, 764/tcp,*
*2049/udp};*
*redef likely_server_ports += {ports};*
*event bro_init() &priority=5*
* {*
* Analyzer::register_for_ports(Analyzer::ANALYZER_NFS, ports);*
* }*
*event nfs_proc_getattr(c: connection, info: NFS3::info_t, fh: string,**attrs:
NFS3::fattr_t){*
* print c;*
*}*
and am getting below error
944207397.280000 internal error: unknown analyzer name RPC; mismatch with
tag analyzer::Component?
Aborted (core dumped)
Regards,
Sunu